cyberintel.kalymoon.com · 52031 articles · updated every 4 hours · grows forever
A vulnerability classified as critical has been found in Automated Logic WebCTRL Premium Server up to 8.4 . This impacts an unknown function. The manipulation leads to authentication bypass by spoofin…
A vulnerability classified as critical was found in WebReflection flatted up to 3.4.1 . Affected is the function parse of the component JSON Parser . The manipulation results in improperly controlled …
A vulnerability, which was classified as critical , has been found in IGL-Technologies eParking.fi . Affected by this vulnerability is an unknown functionality. This manipulation causes session expira…
A vulnerability, which was classified as problematic , was found in Imagination Graphics DDK up to 23.2 RTM/25.1 RTM . Affected by this issue is some unknown functionality of the component Switch Stat…
A vulnerability has been found in Automated Logic WebCTRL Premium Server up to 8.4 and classified as problematic . This affects an unknown part. Performing a manipulation results in multiple binds to …
A vulnerability was found in CTEK Chargeportal and classified as critical . This vulnerability affects unknown code. Executing a manipulation can lead to session expiration. This vulnerability is regi…
A vulnerability was found in avo-hq avo up to 3.30.2 . It has been classified as problematic . This issue affects some unknown processing. The manipulation of the argument return_to leads to cross sit…
A vulnerability was found in barebox up to 2025.09.2/2026.03.0 . It has been declared as critical . Impacted is an unknown function. The manipulation results in insufficient verification of data authe…
A vulnerability was found in Discourse up to 2026.1.1/2026.2.0/2026.3.0-latest . It has been rated as problematic . The affected element is an unknown function of the component Content Security Policy…
A vulnerability categorized as critical has been discovered in Discourse up to 2026.1.1/2026.2.0/2026.3.0-latest . The impacted element is an unknown function of the component Zendesk Plugin . Such ma…
A vulnerability identified as problematic has been detected in squidowl halloy up to 2026.4 . This affects an unknown function. Performing a manipulation results in incorrect permission assignment. Th…
A vulnerability labeled as problematic has been found in iTracker360 Plugin up to 2.2.0 on WordPress. This impacts an unknown function of the component Setting Handler . Executing a manipulation can l…
A vulnerability marked as problematic has been reported in xhanch_studio Xhanch Plugin up to 1.1.2 on WordPress. Affected is the function xms_setting of the component Setting Handler . The manipulatio…
A vulnerability described as critical has been identified in OpenClaw up to 2026.2.20 . Affected by this vulnerability is an unknown functionality of the component BlueBubbles Plugin . The manipulatio…
A vulnerability classified as critical has been found in IGL-Technologies eParking.fi . Affected by this issue is some unknown functionality. This manipulation causes insufficiently protected credenti…
A vulnerability classified as critical was found in CTEK Chargeportal . This affects an unknown part. Such manipulation leads to insufficiently protected credentials. This vulnerability is referenced …
A vulnerability, which was classified as problematic , has been found in jetmonsters JetFormBuilder Plugin up to 3.5.6.2 on WordPress. This vulnerability affects the function Uploaded_File::set_from_a…
A vulnerability, which was classified as critical , was found in Apache Artemis and ActiveMQ Artemis on OpenWire. This issue affects some unknown processing of the component OpenWire Consumer Handler …
A vulnerability has been found in feast-dev feast and classified as critical . Impacted is an unknown function of the file /save-document . The manipulation leads to path traversal. This vulnerability…
A vulnerability was found in feast-dev feast and classified as problematic . The affected element is an unknown function of the component WebSocket Endpoint . The manipulation results in resource cons…
The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have recently released a joint cybersecurity advisory regarding a widespread phishing campaign…
Attackers have compromised the widely used open-source Trivy vulnerability scanner, injecting credential-stealing malware into official releases and GitHub Actions used by thousands of CI/CD workflows…
The threat actors behind the supply chain attack targeting the popular Trivy scanner are suspected to be conducting follow-on attacks that have led to the compromise of a large number of npm packages …